Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.94c6a21ab9f83c30a454f279a319ea8b.exe

  • Size

    790KB

  • Sample

    231114-lczthaba23

  • MD5

    94c6a21ab9f83c30a454f279a319ea8b

  • SHA1

    f805a02961e5f47310e4ee12b27c87e38fe1be49

  • SHA256

    919399996ee45cd58f4573837d0556a32550a96cd4c046aab340e0c0ab4f6da9

  • SHA512

    d0b82a763cd6a4901e3fbd441f5004fed7a91732de4336a8978515a301461ad1c59370256846b44180961be77edd3b63d7aafdd46aab48276e6994dd18e8aa41

  • SSDEEP

    12288:BXCFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:BqPLPEoIlg17o

Score
10/10

Malware Config

Targets

    • Target

      NEAS.94c6a21ab9f83c30a454f279a319ea8b.exe

    • Size

      790KB

    • MD5

      94c6a21ab9f83c30a454f279a319ea8b

    • SHA1

      f805a02961e5f47310e4ee12b27c87e38fe1be49

    • SHA256

      919399996ee45cd58f4573837d0556a32550a96cd4c046aab340e0c0ab4f6da9

    • SHA512

      d0b82a763cd6a4901e3fbd441f5004fed7a91732de4336a8978515a301461ad1c59370256846b44180961be77edd3b63d7aafdd46aab48276e6994dd18e8aa41

    • SSDEEP

      12288:BXCFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:BqPLPEoIlg17o

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks